CVE-2016-9470: XSS
Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9470?
CVE-2016-9470 is classified as a high severity vulnerability due to its potential to enable attackers to gain complete control over a victim's machine.
How do I fix CVE-2016-9470?
To fix CVE-2016-9470, you should upgrade to Revive Adserver version 3.2.5 or higher, and 4.0.1 or higher.
What type of attack does CVE-2016-9470 involve?
CVE-2016-9470 involves a Reflected File Download (RFD) attack vector.
Which versions of Revive Adserver are affected by CVE-2016-9470?
Revive Adserver versions prior to 3.2.5 and exactly 4.0.0 are affected by CVE-2016-9470.
What is the impact of CVE-2016-9470?
The impact of CVE-2016-9470 is significant as it allows attackers to execute unauthorized file downloads on targeted systems.